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Method and system for providing copies of scrambled content 
with unique watermarks, and system for descrambling scrambled 
content 



The invention generally relates to fingerprinting or 
watermarking of content and more specifically to a method and 
system for providing copies of scrambled content with unique 
watermarks. The invention further relates to a system for pro- 
5 viding scrambled content in particular by broadcasting and to 
a system for descrambling scrambled content. 

In order to prevent unauthorised copying of content, 
content is generally scrambled, wherein only authorised users 
having the correct key(s) for descrambling are able to use the 

10 content. Generally the content is both compressed and scram- 
bled. However, after decompressing and descrambling unauthor- 
ised copies could be made. In order to locate the source of 
unauthorised copies, it is desirable to fingerprint or water- 
mark content however without decompressing and descrambling 

15 the content. Fingerprinting normally involves processing the 
content by adding predetermined noise or the like to the con- 
tent . When the content is scrambled, access to the content is 
not available, so normally the content should be descrarnbled 
before the fingerprint or watermark can be added. Addition- 

20 ally, it is desirable to add the fingerprint in a highly inse- 
cure environment. Under such circumstances it is undesirable 
to descramble and rescramble the content for the watermarking 
process as it is very likely that the environment is tampered 
with to bypass the watermarking process. Moreover, adding wa- 

25 termarks and rescrambling requires significant processing ca- 
pacity. 

The invention aims to provide a method and system for 
providing copies of scrambled content, wherein unique water- 
marks can be added in a relatively simple manner. 
3 0 According to a first aspect of the invention a method 

for providing copies of scrambled content with unique water- 
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marks is provided, characterized by providing at least two 
copies of at least parts of the content, one copy watermarked 
with first predetermined bite, and one copy watermarked with 
second predetermined bits, scrambling the copy watermarked 
5 with first predetermined bits, scrambling the copy watermarked 
with second predetermined bits and providing a user copy of 
the scrambled content by combining parts of the scrambled copy 
watermarked with first predetermined bits and parts the scram- 
bled copy watermarked with second predetermined bits in a man- 

10 ner unique for the user copy. 

According to a second aspect the invention provides a 
system for providing or playing back a copy of scrambled con- 
tent with a unique watermark, comprising a processing unit and 
a storage device, characterized in that the storage device 

15 contains at least a scrambled copy of at least parts of the 
content watermarked with first predetermined bits, and a 
scrambled copy of at least parts of the content watermarked 
with second predetermined bits, and in that the processing 
unit is programmed to provide at a request received from a 

20 user a copy of the complete scrambled content by combining 

parts of the scrambled copy watermarked with first predeter- 
mined bits and parts the scrambled copy watermarked with sec- 
ond predetermined bits in a manner unique to the user. 

in particular in broadcast applications the invention 

25 involves adding a watermark to scrambled content which is de- 
scrambled in real time in a receiver or descrambled during 
playback of content stored to disk. According to a third as- 
pect the invention provides a system for providing scrambled 
content, in particular by broadcasting, comprising a scrambler 

30 for scrambling clear content to provide scrambled content, 
characterized by a processing device programmed to provide 
clear content comprising a plurality of parts in two or more 
copies, each copy watermarked with predetermined bits unique 
to the copy, wherein the scrambler scrambles at least the wa- 

35 termarked copies with a corresponding key(K z , Ko) , and a key 
management program enforcing receivers adapted to de scramble 
the scrambled content to provide clear content with a prede- 
termined combination of descrambled watermarked copies at each 
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receiver, the clear content thereby having a watermark unique 
to the respective receiver. 

According to a further aspect of the invention a sys- 
tem is provided for de scrambling scrambled content, comprising 
5 a descrambler for descrambling the scrambled content/ and a 

processing device for providing keys to the descrambler, char- 
acterized in that the processing device is programmed to pro- 
vide the second key(K z ) or third key(Ko) such that the scram- 
bled content is descrambled with a combination of descrambled 
10 parts watermarked with first predetermined bits and parts wa- 
termarked with second predetermined bits unique to the de- 
scrambling system. 

The invention will be further explained by reference 
to the drawings in which two embodiments of the invention are 
15 schematically shown. 

Fig. 1 schematically shows an application of the * 
method and system of the invention in an Internet environment. 

Pig. 2 schematically shows an application of the 
method and system of the invention in a broadcasting environ- 
20 merit. 

In the embodiments described hereinafter zero's will 
be used as first predetermined bits and one's will be used as 
second predetermined bits. It is however contemplated that 
predetermined bit sequences of multiple bits are used to wa- 

25 termark the copies used in the method and system of the pres- 
ent invention. Further only two copies watermarked with zero's 
and one's, respectively are used in the examples described. It | 
will be understood that more than two copies, each watermarked Cfe 
with a predetermined bit sequence, can be used in the method 

3 0 and system of the invention. 

Referring to fig. l there is shown an embodiment of 
the invention in an Internet application, wherein a server 1 
is connected in a known manner to the Internet 2 and a large 
number of clients 3 is also connected to the Internet. It is 

3 5 noted that the Internet is only mentioned as an example of a 
network capable of providing a connection between a server l 
and clients 2. Any other type of connection can be used. 

The server 1 comprises a processing unit 4 and a ator- 
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age device 5/ such as a hard disc. The storage device 5 con- 
tains three copies of the content, which is for example a 
movie- Each copy stored in the storage device 5 is scrambled 
in a suitable manner. A first copy referred to as neutral copy 
5 in this specification is just scrambled. A second copy of the 
content is obtained by adding a watermark with one's only to 
at least parts of the complete content. Thereafter the second 
copy is scrambled in a suitable manner, so that a scrambled 
copy watermarked with one's is obtained. The third copy is ob- 

10 tained by watermarking at least parts of the content with 
zero's only and thereafter scrambling the copy watermarked 
with zero's in a suitable manner. It is noted that in practice 
the size of the watermarked copies may comprise for example 
only 1-2 0% of the complete movie. However it is possible to 

15 watermark the complete movie with one's and zero's/ respec- 
tively. In that case it is not necessary to use a neutral 
scrambled copy. Further it is noted that the copies of the 
content need not to be stored on the same disc or at the same 
server. 

2 0 If a user requests the download of a scrambled copy of 

the content from the server 1 by means of a client computer 2, 
a watermark unique to the user/client 3 is added as follows. 
This watermark is a unique identification made up of a unique 
sequence of one's and zero's. In accordance with this unique 

25 sequence of one's and zero's the processing unit 4 combines 
parts of the neutral copy, the copy watermarked with zero's 
and the copy watermarked with one's and forwards the combina- 
tion from the server 1 to the client 3 . In this manner the 
client 3 receives a scrambled copy with a unique watermark 

30 added to the same, wherein for adding the watermark it is not 
necessary to descramble and rescramble the content in the 
relatively insecure environment of the server. The unique 
identification of one's and zero's and a user identification 
are stored in the storage device 5 or any other suitable stor- 

35 age device. 

The neutral scrambled copy of the content is used to 
reduce the amount of data that needs to be stored in the stor- 
age device 4. However, it is possible to apply the method for 
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providing a scrambled copy with watermark without using a neu- 
tral scrambled copy. Further, it ia noted that the server 1 
can also be a consumer home apparatus for playing back stored 
content ■> 

5 Pig- 2 shows an embodiment of the method of the inven- 

tion as used in a broadcast application. A system 6 for broad- 
casting scrambled content comprises a scrambler 7 for scram- 
bling clear content in a usual manner. For example keys are 
used by the scrambler- 7 in a known scrambling algorithm, 

10 wherein the keys are inserted into the stream scrambled con- 
tent as entitlement control messages (ECM's) . In the broadcast 
application of fig. 2, the watermark is added to the content 
during decryption at a system 8 for descratnbling the scrambled 
content received from the broadcasting system 6. Descratnbling 

15 in the system 8 can be real time or during playback at a later 
time if the system 8 comprises a suitable storage medium, for 
example a hard disc. 

The broadcasting system 6 comprises a processing de- 
vice 9 receiving the content to be broadcasted, for example a 

20 movie. The processing device 9 is programmed to provide a plu- 
rality of double parts or so-called double illuminated parts. 
If the movie is for example compressed according the MPEG al- 
gorithm, I-frames or parts thereof to keep the bandwidth of 

it 

the system down, are double illuminated and both double illu- ^ 
25 minated sections are provided with a watermark by adding a wa- 

termark of zero's only to the first section and a watermark of < 
one's only to the second section of each double illuminated Q _ 
part- The processing device 9 forwards the neutral sections Q 
and the double illuminated sections to the scrambler 7 and O" 
3 0 controls the scrambler 7 to use a first key Kp to scramble to CD 
neutral sections, a second key K z to scramble the sections wa- 
termarked with zero's and a third key K 0 to scramble the sec- O 
tions watermarked with one's. 

The broadcasting system 6 comprises a device 10 for 
35 providing a key management program enforcing descrambling sys- 
tems 8 or more generally receivers adapted to descramble the 
scrambled content with a combination of descrambled sections 
watermarked with zero's and sections watermarked with one's 
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unique to tine respective receivers S. in this mariner each sys- 
tem 8 provides a clear content stream with an identification 
unique to the system. 

The device 10 can for example provide ECM' s with the 
S first key K F and the second key Kz or the third key Kq, During 
broadcasting the scrambled content, the device 10 provides 
ECM's to the respective receiving systems 8 alternatingly con- 
taining the second K z or the third key K 0 to obtain the unique 
combinations of one's and zero's at the respective receiving 

10 systems 8. 

The receiving system 8 for descrambling the scrambled 
content comprises a descrambler 11 for descrambling the scram- 
bled content and a processing device 12 for providing keys ob- 
tained from the ECM's received to the descrambler 11. A proc- 

15 essing unit 13 receives the scrambled content and extracts the 
ECM's from the content and forwards the ECM's to the process- 
ing device 12 . In an embodiment wherein the device 10 of the 
broadcasting system € provides ECM's with the first key K F and 
the second key K z or the third key K 0 , the processing device 12 

20 delivers the keys to the descrambler 11, so that a clear con- 
tent with a unique combination of zero's and one's will be ob- 
tained. For, if the second key K 2 is available r only the sec- 
tion watermark with zero's can be descrambled whereas if only 
the K 0 is available only the section watermarked with one's can 

25 be descrambled. In this embodiment watermarking the clear con- 
tent is controlled directly from the broadcasting system 6. 

As an alternative, the key management program can be 
downloaded or permanently stored in the processing device 12 , 
which is made as a secure device in this case, i.e. a device 

30 which can not: be tampered with, such as a smart card, in such 
a case the smart card 12 could receive an ECM including all 
three keys K P , K z and Ko, wherein the keys are provided to the 
descrambler 11 in, a manner unique to the smart card 12, 

As stated above it will be understood that instead of 

35 double parts and two keys Kz and Kq as in the embodiment of 
fig. 2, the processing device can be programmed to provide 
clear content with a plurality of parts in more than two cop- 
i eg using more than two keys for scrambling and descrambling, 
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respectively, the copies. 

Although a movie is mentioned as an example of content 
it will be understood that the invention can be used with any 
type of video or audio content. In embodiments where secrecy 
5 is not important a neutral copy in the clear can be used in- 
stead of a scrambled copy. In the system of fig. 2, the ECM's 
would comprise the keys K z and Ko only. 

Further, it is noted that the system of fig- 2 can 
also be used in other applications for providing copies with 
10 unique watermarks by means of a key management program. 

The invention is not restricted to the above described 
embodiments which can be varied in a number of ways within the 
scope of the attached claims . 
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CLAIMS 

1. Method for providing copies of scrambled content 
with unique watermarks, characterized by providing at least 
two copies of at least parts of the content, one copy water- 
marked with first predetermined bits, and one copy watermarked 

5 with second predetermined bits, scrambling the copy water- 
marked with first predetermined bits, scrambling the copy wa- 
termarked with second predetermined bits and providing a user- 
copy of the scrambled content by combining parts of the scram- 
bled copy watermarked with first predetermined bits and parts 
10 the scrambled copy watermarked with second predetermined bits 
in a manner unique for the user copy. 

2. Method according to claim 1, wherein a neutral 
copy of the content is provided and a user copy of the scram- 
bled content is provided by combining parts of the neutral 

IS copy, parts of the scrambled copy watermarked with first pre- 
determined bits and parts the scrambled copy watermarked with 
second predetermined bits in a manner unique for the user 
copy. 

3. System for providing or playing back a copy of 
20 scrambled content with a. unique watermark, comprising a proc- 
essing unit and a storage device, characterized in that the 
storage device contains at least a scrambled copy of at least 
parts of the content watermarked with first predetermined 
bits, and a scrambled copy of at least parts of the content 

25 watermarked with second predetermined bits, and in that the 

processing unit is programmed to provide at a request received 
from a user a copy of the complete scrambled content by com- 
bining parts of the scrambled copy watermarked with first pre- 
determined bits and parts the scrambled copy watermarked with 

3 0 second predetermined bits in a manner unique to the user, 

4. System according to claim 3, wherein the process- 
ing unit is further programmed to store a user identification 
together with the corresponding unique combination of water- 
marked copies , 

35 5. System according to claim 3 or 4, wherein the 

storage device further contains a neutral copy of the content. 
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wherein the processing unit is programmed to provide a user 
copy of the complete content by combining parts of the neutral 
copy, parts of the scrambled copy watermarked with first pre- 
determined bits and parts the scrambled copy watermarked with 
5 second predetermined bits in a manner* unique to the user. 

6. System for providing scrambled content, in par- 
ticular by broadcasting, comprising a scrambler for scrambling 
clear content to provide scrambled content, characterized by a 
processing device programmed to provide clear content compris- 

10 ing a plurality of parts in two or more copies, each copy wa- 
termarked with predetermined bits unique to the copy, wherein 
the scrambler scrambles at least the watermarked copies with a 
corresponding key(Kz, Kq) , and a key management program enforc- 
ing receivers adapted to descramble the scrambled content to 

15 provide clear content with a predetermined combination of de- 
scrambled watermarked copies at each receiver, the clear con- 
tent thereby having a watermark unique to the respective re- 
ceiver . 

7. System according to claim 6, wherein the scrambler 
2 0 uses a first key(Kp) to scramble the clear content, wherein the 

processing device is programmed to provide clear content com- 
prising a plurality of double parts, one part watermarked with 
first predetermined bits and one part watermarked with second 
predetermined bits, wherein the scrambler scrambles the parts 
25 watermarked with first predetermined bits with a second key(K 2 > 
and the parts watermarked with second predetermined bits with 
a third key(Ko) • 

8. System according to claim 6, comprising a device 
for providing entitlement control messages for receivers with 

30 at least two keys <K z ,Ko) , wherein the keys are alternated to 

obtain said unique watermarks at the respective receivers . Q 

9. System according to claim 7, comprising a device 
for providing entitlement control messages for receivers with 

the first key(K P ), second key(K 2 ) or third key(Ko)/ wherein the CD 
35 second key(K z ) and third key(Ko) are alternated to obtain said ^) 
unique combinations of second predetermined bits and first O 
predetermined bits at the respective receivers, wherein the U 
first key can be the same as the second or third key(K z ,Ko) « 
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10 

10 • System for descrambling scrambled content, com- 
prising a descrambler for descranibling the scrambled content , 
and a processing device for providing keys to the descrambler, 
characterized in that the processing device is programmed to 
5 provide at least a second key(K z ) or third key(Ko) such that 
the scrambled content is descrambled with a combination of de- 
scrambled parts watermarked with first predetermined bits and 
parts watermarked with second predetermined bits unique to the 
descranibling system. 
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ABSTRACT 

A system for providing or playing back a copy of 
scrambled content with a unique watermark comprises a storage 
device containing a scrambled copy watermarked with, first pre- 
determined bits, a scrambled copy watermarked with second pre- 
S determined bits and a processing unit programmed to provide at 
a request received from a user a copy of the complete scram- 
bled content by combining parts of the scrambled copy water- 
marked with first predetermined bits and parts the scrambled 
copy watermarked with second predetermined bits in a manner 

10 unique to the user. In a system for providing scrambled con- 
tent in particular by broadcasting, the scrambler for scram- 
bling a clear content to provide scrambled content uses a 
first key(Kp) to scramble the clear content. A processing de- 
vice is programmed to provide clear content comprising a plu- 

15 rality of double parts, one part watermarked with first prede- 
termined bits and one part watermarked with second predeter- 
mined bits, wherein the scrambler scrambles the parts water- 
marked with first predetermined bits with a second key(K 2 ) and 
the parts watermarked with second predetermined bits with a 

2 0 third key(Ko) • A key management program enforces receivers* 

adapted to descramble the scrambled content with a combination 
of descrambled parts watermarked with first predetermined bits 
and parts watermarked with second predetermined bits unique to 
the respective receivers. 
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